KDE KDM Unspecified Local Denial Of Service Vulnerability

Bugtraq ID:	26909
Class:	Unknown
CVE:	CVE-2007-5963
Remote:	No
Local:	Yes
Published:	Dec 17 2007 12:00AM
Updated:	Jan 19 2009 07:22PM
Credit:	This issue was disclosed in an rPath security advisory.
Vulnerable:	rPath kdebase 3.4.2-3.15 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 KDE KDE 3.5.8 KDE KDE 3.5.7 KDE KDE 3.5.6 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5.1 KDE KDE 3.5 KDE KDE 3.4.3 KDE KDE 3.4.2 KDE KDE 3.4.1 + Redhat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KDE 3.3.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 s/390 + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 ppc + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mipsel + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 mips + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 m68k + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 hppa + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 arm + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 amd64 + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 alpha + Debian Linux 3.1 alpha + Debian Linux 3.1 + Debian Linux 3.1 + Debian Linux 3.1 KDE KDE 3.3.2 KDE KDE 3.3.1 + Redhat Fedora Core3 KDE KDE 3.3 KDE KDE 3.2.3 KDE KDE 3.2.2 + KDE KDE 3.2.2 + Redhat Fedora Core2 KDE KDE 3.2.1 KDE KDE 3.2 KDE KDE 3.1.5 KDE KDE 3.1.4 KDE KDE 3.1.3 + Redhat Desktop 3.0 + Redhat Desktop 3.0 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux WS 3 KDE KDE 3.1.2 + KDE KDE 3.1.2 KDE KDE 3.1.1 a KDE KDE 3.1.1 + S.u.S.E. Linux Personal 8.2 + S.u.S.E. Linux Personal 8.2 KDE KDE 3.1 + Redhat Linux 9.0 i386 + SuSE Linux 8.1 + SuSE Linux 8.1 KDE KDE 3.0.5 b KDE KDE 3.0.5 a + Redhat Linux 8.0 i386 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 i386 KDE KDE 3.0.5 KDE KDE 3.0.4 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.2 + Gentoo Linux 1.2 KDE KDE 3.0.3 a KDE KDE 3.0.3 + Conectiva Linux Enterprise Edition 1.0 + FreeBSD FreeBSD 4.7 -STABLE + FreeBSD FreeBSD 4.7 -STABLE + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 9.0 KDE KDE 3.0.2 + Mandriva Linux Mandrake 8.2 KDE KDE 3.0.1 KDE KDE 3.0
Not Vulnerable:	rPath kdebase 3.4.2-3.15-1

KDE KDM Unspecified Local Denial Of Service Vulnerability

KDE KDM is prone to a local denial-of-service vulnerability.

Exploiting this issue allows local attackers to deny service to legitimate users.

Very few details are currently available regarding this issue. We will update this BID as information becomes available.

KDE KDM Unspecified Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

KDE KDM Unspecified Local Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Corporate Server 4.0

• Mandriva kdebase-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-doc-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kate-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-data-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-doc-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdeprintfax-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kmenuedit-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-konsole-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-nsplugins-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-progs-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkateinterfaces0-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkateutils0-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-devel-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-devel-doc-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-kate-3.5.4-2.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva kdebase-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kate-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-data-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdeprintfax-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-config-file-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kmenuedit-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-konsole-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-nsplugins-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-progs-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-devel-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-kate-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-kate-devel-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-kmenuedit-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-konsole-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-nsplugins-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-nsplugins-devel-3.2-79.20.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva kdebase-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kate-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-data-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdeprintfax-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-config-file-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kmenuedit-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-konsole-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-nsplugins-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-progs-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-devel-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-kate-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-kate-devel-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-kmenuedit-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-konsole-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-nsplugins-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libkdebase4-nsplugins-devel-3.2-79.20.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva kdebase-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-common-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kate-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-data-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kcontrol-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdeprintfax-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kdm-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-kmenuedit-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-konsole-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-nsplugins-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva kdebase-progs-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kateinterfaces0-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kateutils0-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-devel-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-devel-doc-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64kdebase4-kate-3.5.4-2.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

KDE KDM Unspecified Local Denial Of Service Vulnerability

References:

• KDE Homepage (KDE)
  
• rPSA-2007-0268-1 kdebase (rPath Update Announcements )